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CLAIMS 

1. A method for generating an identification value for identifying an electronic message by 
application of at least one first hash function with fixed compression that compresses n 

5 blocks of data Into a number of blocks which is smaller than n or Into one single block, the 
hash function being repetitively applied in a tree-structure compression of the message, so 
that the message is being compressed in a plurality of tree-structure levels, each level 
receiving mi input blocks for compression, subscript I denoting a current level in the tree 
structure, the method comprising processing an output of the tree-structure compression 
10 further to obtain said Identification value, 
characterized in that 

a residual data block is passed without compression from the current level to another, 
subsequent level in case n does not divide the number of input blocks mi for said current 
level i. 

15 

2. A method according to claim 1, further comprising the step of inserting a set of predefined 
data at a predetermined position in the message, e.g. by appending the set of predefined 
data to the message, so that the length of the message with the appended set of data 
becomes a multiple of the length of the blocks. 

20 

3. A method according to claim 1 or 2, wherein the tree-structure compression Is performed 
until the number of blocks Is less than n. 

4. A method according to claim 3, further comprising the step of concatenating the output 
25 with data which represent a length L of the message to obtain a concatenated output, the 

length L representing the length of the message without said appended set of data. 

. 5. A method according to claim 4, wherein a hash function is applied to the concatenated 
output to obtain a compressed concatenated output, said hash function being one of: 
30 - the at least one first hash function; and 

- a second hash function. 

6. A method according to any of the preceding claims, further comprising applying a further 
hash function to at least one of: 
35 - said output, 

- a further set of data derived from said output, 

- said concatenated output, and 

- said compressed concatenated output. 

40 7. A method according to any of the preceding claims, further comprising applying a 

cryptographic function to said output or to a further set of data derived from said output. 

8. A method according to claim 6 or 7, wherein at least one of: 

- said at least one first hash function; 
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- said second hash function; and 

- said further hash function 

makes use of at least one cryptographic key. 

9. A method according to claim 8, wherein different cryptographic keys for the at least one 
first hash function are used in different levels of the tree structure. 

10. A method according to claim 8 or 9, wherein different cryptographic keys are used in one 
level of the tree structure. 

11. A method according to claim 8 or 9, wherein the same cryptographic key is used in a 
single level of the tree structure. 

12. A method according to any of the preceding claims, wherein at least one of: 

- said first hash function; 

- said second hash function; and 

- said further hash function 
is a universal hash function. 

13. A method according to any of the preceding claims, wherein at least one of: 
" said at least one first hash function; 

- said second hash function; and 

- said further hash function 

comprises at least two different hash functions. 

14. A method according to claim 13, wherein the at least two different hash functions 
compress different numbers n of blocks. 

15. A method according to claim 13 or 14, wherein at least one of the at least two different 
hash functions compresses a variable number n of blocks. 

16. A method according to any of claims 13-15, wherein the different hash functions use 
different cryptographic keys. 

17. A method according to any of claims 8-16, comprising performing a plurality of tree- 
structure compressions of the message to obtain a plurality of results, and concatenating the 
plurality of results into a concatenated result. [ 

18. A method according to claim 17, wherein different cryptographic keys are applied In the 
plurality of tree-structure compressions. 

19. A method according to claim 17, wherein partly identical cryptographic keys are applied 
In the plurality of tree-structure compressions. 
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20. A computer system comprising a memory and a processor, the processor being 
programmed to carry out the method of any of claims 1-19. 

21. A computer program product comprising means for performing the method of any of 
5 claims 1-19. 

22. A method for generating an identification value for identifying an electronic message by 
application of at least one first hash function with fixed compression that compresses n 
blocks of data into a number of bloclcs which Is smaller than n or into one single block, the 

10 hash function being repetitively applied in a tree-structure compression of the message, so 
that the message is being compressed in a plurality of tree-structure levels, each level 
receiving mi Input blocks for compression, subscript i denoting a current level in the tree 
structure, the method comprising processing an output of the tree-structure compression 
further to obtain sard Identification value, 

15 chgracteriged Lo that 

the method comprises determining whether or not n divides the number of input blocks mi for 
said current level i; and 

if n does divide mi: applying said at least one first hash function mt/n times; 
if n does not divide mi: 

20 - applying said at least one first hash function at most m/n times, whereby at least one 

residual data block is left unprocessed by the first hash function; and 
processing said at least one unprocessed data block by means of an auxiliary hash 
function which, in one single hash operation, compresses the at least one 
unprocessed data block into one single block. 

25 

23. A method according to claim 22, further comprising the step of inserting a set of 
predefined data at a predetermined position in the message, e.g. by appending the set of 
predefined data to the message, so that the length of the message with the appended set of 
data becomes a multiple of the length of the blocks. 

30 

24. A method according to claim 22 or 23, wherein the tree-structure compression is 
performed until the number of blocks is less than n. 

25. A method according to claim 24, further comprising the step of concatenating the output 
35 with data which represent a length L of the message to obtain a concatenated output, the 

length L representing the length of the message without said appended set of data. 

26. A method according to claim 25, wherein a hash function is applied to the concatenated 
output to obtain a compressed concatenated output, said hash function being one of: 

40 - the at least one first hash function; and 
- a second hash function. 

27. A method according to any of claims 22-26, further comprising applying a further hash 
function to at least one of: 

45 - said output. 
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- a further set of data derived from said output, 

- said concatenated output, and 

- said compressed concatenated output. 

5 28. A metliod according to any of claims 22-27, further comprising applying a cryptographic 
function to said output or to a further set of data derived from said output. 

29. A method according to any of claims 22-28, wherein at least one of: 

- said at least one first hash function; 
10 - said second hash function; and 

- said further hash function 

makes use of at least one cryptographic key. 

30. A method according to claim 29, wherein different cryptographic keys for the at least one 
15 first hash function are used in different levels of the tree structure. 

31. A method according to claim 29 or 30, wherein different cryptographic keys are used In 
one level of the tree structure. 

20 32. A method according to claim 29 or 30, wherein the same cryptographic key is used in a 
single level of the tree structure. 

33. A method according to any of claims 22-32, wherein at least one of: 

- said first hash function; 

25 - said second hash function; and 

- said further hash function 
is a universal hash function. 

34. A method according to any of claims 22-33, wherein at least one of: 
30 - said at least one first hash function; 

- said second hash function; and 

- said further hash function 

comprises at least two different hash functions. 

35 35. A method according to claim 34, wherein the at least two different hash functions 
compress different numbers n of blocks. 

36. A method according to claim 34 or 35, wherein at least one of the at least two different 
hash functions compresses a variable number n of blocks. 

40 

37. A method according to any of claims 34-36, wherein the different hash functk>ns use 
different cryptographic keys. 
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38. A method according to any of claims 29-37, comprising performing a plurality of tree- 
structure compressions of the message to obtain a plurality of results, and concatenating the 
plurality of results into a concatenated result. 

5 39. A method according to claim 38, wherein different cryptographic keys are applied in the 
plurality of tree-structure compressions. 

40. A method according to claim 38, wherein partly Identical cryptographic keys are applied 
in the plurality of tree-structure compressions. 

10 

41. A computer system comprising a memory and a processor, the processor being 
programmed to carry out the method of any of claims 22-40. 

42. A computer program product comprising means for performing the method of any of 
15 claims 22-40. 

43. A method for generating an identification value for identifying an electronic message, the 

method comprising the steps of: . 

- processing at least one block of a set of data derived from the message Into a resulting 
20 number by means of a hash function which is at least delta-universal; and 

- adding a number representation of a further block of data derived from the message to 
the resulting number to obtain a modified resulting number; 

- using the modified resulting number further to obtain said Identification value. 

25 44. A method according to claim 43> wherein the hash function operates on a single block of 
data only. 

. 45. A method according to claim 43 or 44, wherein the delta-universal hash function Is 
repetitively applied In a tree-structure compression of the message, so that the message is 
30 being compressed In a plurality of tree-structure levels, each tree-structure receiving mi Input 
blocks for compression, the delta-universal hash function and the subsequent step of adding 
performing a compression of n data blocks into one single data block. 

46. A method according to claim 45, wherein a residual data block is passed without 

35 processing thereof from a current level to another subsequent level in case n does not divide 
the number of input blocks mi for said current level I. 

» < 

47. A method according to any of claims 43-46, wherein the modified resulting number is 
determined by the function: 

40 (mi+k mod 2^^) (LSR(mi,32)+LSR(k,32) mod 2^2)+m2 mod 2^, 

where mi and m2 denote two of said blocks of data, LSR(x,y) denotes a logical-shift-right by 
y bits of input x, and k denotes a cryptographic key, whereby mi, n\2 and k are represented 
as 64 bit unsigned Integers. 



l5739PCn)0 

19 

48. A computer system comprising a memory and a processor, the processor being 
programmed to carry out the method of any of claims 43-47. 

49. A computer program product comprising means for performing the method of any of 
claims 43-47. 



